Palo Alto GlobalProtect VPN Maintenance and Notes

Tags VPN
  • Once the client is installed you no longer need to use the web page to log in. Simply click on the tray icon to access the VPN.
  • This VPN only encrypts traffic to and from the TAMUC campus. Local system resources and network connections outside of the University are not protected and should be treated/secured appropriately using system firewalls and AV/security packages. Third party “VPN” software is not recommended for this purpose.
  • Certain locally assigned addresses (10.x.x.x) on the client’s local network end may conflict with the VPN. Contact CITE support if you encounter this situation.
  • For optional updates, you may occasionally be presented with a dialog box similar to the one shown below. This means there is a required update available for download and installation. Note: Client updates do not require administrative access to install.

1. Click “Yes” to download the client

VPN Dialog window

2. Click “Yes” to install the client.

VPN Dialog- click yes

3. Restart the VPN after the installation.

For mandatory updates, you may occasionally be presented with the following text box after connecting:

Update in progress

1. The VPN software will automatically update and disconnect within a minute or two.
2. You may then reconnect using the normal procedure

Note that certain locally assigned addresses (10.x.x.x) at the client end may conflict with the VPN. Contact CITE support if you encounter this situation.

If the following message appears after login indicating that access to the network has been restricted then the client system has been placed in quarantine. The session will disconnect itself and you must contact the CITE
helpdesk for assistance.

Restricted access error message

You may see a message similar to the one displayed below. This is a reminder that your TAMUC Active Directory password will soon expire. You may change it at your convenience using the normal procedures for password management.

Password expiring notificaiton

If you change either to or from the 10.28.x.x internal network after installation you will need to modify your client before using it. This is a onetime process to add the additional portal address.

1. Click on the tray icon to display the GlobalProtect application

VPN Application window

2. At the top right of the dialog box there are three horizontal lines. Click this area to display the GlobalProtect App menu.

VPN Application Window-Menu shown

3. Click on “Settings” to display the dialog box below

Settings dialog box

4. In the “Portals” frame you will see the address of the previously added GlobalProtect portal.
5. Click the “Add” button and enter the other GlobalProtect portal address as shown above. Click “Save”.
6. Click to close the GlobalProtect “Settings” dialog box.
7. Clicking on the tray icon will now bring up a new “Portal” drop down menu in the login dialog box. Select the appropriate portal when logging in. Select Ra-vlan28.tamuc.edu for 10.28.x.x IP addresses and ra.tamuc.edu for all other locations. This setting will remain in its current state until changed.

Portal dropdown option